[Koha-bugs] [Bug 27305] iCal feed for circulation issues

[bugzilla-daemon at bugs.koha-community.org]

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=27305

--- Comment #8 from David Cook <dcook at prosentient.com.au> ---
(In reply to Nico Bako from comment #7)
> I'm thinking about how GitHub has "personal access tokens" 
> 
> https://docs.github.com/en/free-pro-team@latest/github/authenticating-to-
> github/creating-a-personal-access-token
> 
> But that might be too complicated to implement, and probably unnecessary for
> a library system.
> 

I often think of those as "application specific passwords" but that's just
Google's word for it. 

It wouldn't really be that complicated, but I don't think it's on anyone's
priority list. As you say, for a library system, there probably aren't that
many library users who would want/need access to any kind of API.

> > Koha already uses short-lived API tokens using OAuth2 for its HTTP API.
> 
> I actually just checked this out, and I think you are referring to the
> REST-API instead of the SVC-API. I have tried using the REST-API, but I
> continue to get `{"error",:"Authentication failure."}`. Either I'm doing
> something wrong, or I just don't have access to some of the API endpoints.
> According to this page:
> https://wiki.koha-community.org/wiki/REST_api_RFCs#Unprivileged_.28public.
> 29_routes it looks like I don't have access to much of the REST API; only
> privileged people can access them. Also, the iCal feed I am trying to get
> seems to only be available from the SVC API.
> 

Yes, the API is mostly for privileged users. The REST API wouldn't work for
your iCal feed either, since it uses either OAuth2, Basic Auth, or Cookie auth.
I really don't see any other option than auth via URL parameters for your use
case.

> Haha. I'm proud of myself for being able to figure out how to connect my
> books' due dates with my Google calendar, but I'm not proud AT ALL of
> putting my password in the url... but you guys left me no other choice!

Haha. It was very clever. I'll send an email out to people to see if anyone is
willing to pick up this work. There are easier and harder ways of doing it, so
maybe someone will look at doing an easier version.

-- 
You are receiving this mail because:
You are the assignee for the bug.
You are watching all bug changes.